Your network contains one Active Directory domain named contoso.com. The domain contains 10
domain controllers and a read-only domain controller (RODC) named RODC01.
The domain contains an administrator account named Admin1.
You need to prevent Admin1 from creating more than 100 objects in the domain partition.
Which tool should you use?
A.
the ntdsutil command
B.
the Set-ADDomain cmdlet
C.
the Install-ADDSDomain cmdlet
D.
the dsadd command
E.
the dsamain command
F.
the dsmgmt command
G.
the net user command
H.
the Set-ADForest cmdlet
Explanation:
Active Directory quotas are limits on the number of objects that a security principal (that has been
delegated the Create Child Objects or Delete Child Objects permission) can own and create.
To assign a quota to a security principal, you must use the directory services tools. The command
and required parameters for assigning a quota to a security principal are as follows:
dsadd quota –part <partition distinguished name> –qlimit <quotalimit> –acct <security prinicipal>
Reference: Active Directory Quotas
https://technet.microsoft.com/en-us/library/cc904295(v=ws.10).aspx